I like this kind of thing in principle, but certificates are already getting kind of large and there are a number of other things that one might put in them via

I like this kind of thing in principle, but certificates are already getting kind of large and there are a number of other things that one might put in them via OIDs. But I realize ASN.1 is pretty concise; do you know about how much this proposal would increase the size of a certificate by? Another concern might be that users might not want this to be disclosed because it might give attackers suggestions about how to attack their renewal processes (although of course CAs have been willing to publish information, like issued certs, that some users wouldn't prefer to make public).